Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa
File:                     82624c93-a718-4b6c-b8d0-1502172fc711.roa (raw, json)
Hash identifier:          carLRmKaEActbIuXMpAbIUwLhHSDekWtjV7P6mf6Xvk=
Subject key identifier:   1F:A7:D4:FE:04:B8:AA:38:84:E6:14:CD:D6:2A:96:76:56:D9:2E:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5EB2F4D32E878473F0177D0F7EDCDB2FBA83BBC7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa
Signing time:             Sat 17 May 2025 00:10:26 +0000
ROA not before:           Sat 17 May 2025 00:10:26 +0000
ROA not after:            Sat 21 Jun 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:8060::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b2:f4:d3:2e:87:84:73:f0:17:7d:0f:7e:dc:db:2f:ba:83:bb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:10:26 2025 GMT
            Not After : Jun 21 23:59:59 2025 GMT
        Subject: serialNumber=1cd00505a151eb31e8e269fbe42b98f5582615e17b60e4efe56b75ea139b06e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:84:a8:75:8f:36:68:cb:6f:09:d7:b6:c9:57:
                    9b:bd:86:b8:8f:5f:18:64:9e:f9:99:b9:37:41:de:
                    3c:83:b3:f4:f8:94:14:2a:07:a7:13:8d:05:9b:3e:
                    13:6d:85:c4:0e:0b:5c:ae:bf:b1:3f:99:11:ad:47:
                    1c:f7:b1:a4:10:06:f2:81:f2:e9:1b:ce:9e:a6:75:
                    ea:a1:1a:41:3c:ce:d9:fb:4d:c7:73:87:33:a2:f0:
                    05:bb:82:c9:3e:ac:be:eb:0a:5d:5e:b0:f0:df:c7:
                    25:5f:96:50:1c:7e:20:a6:38:5b:3e:61:60:91:7a:
                    8e:88:ce:04:ea:7b:0a:49:90:03:b8:a7:6b:b0:45:
                    1e:4f:ac:13:88:5c:7e:ed:83:2a:d4:c2:65:4c:ac:
                    f6:9d:45:60:4e:7f:34:cf:4e:17:a3:b0:0a:1e:7a:
                    d7:ec:40:ee:5b:68:6d:28:6a:17:ef:cc:c1:20:a4:
                    70:41:e0:1a:b6:7e:0a:fa:9b:7e:7a:7e:66:4b:7d:
                    7a:df:8c:3d:6e:22:6b:ae:92:11:3c:e7:89:4f:14:
                    6e:11:d1:db:c0:9a:43:f1:43:e9:16:78:48:db:49:
                    b0:95:5c:bb:05:88:92:45:70:52:ef:90:f1:70:31:
                    27:36:ae:53:79:74:ae:0c:40:98:ce:a4:5e:fa:6c:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A7:D4:FE:04:B8:AA:38:84:E6:14:CD:D6:2A:96:76:56:D9:2E:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82624c93-a718-4b6c-b8d0-1502172fc711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8060::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:31:0e:4d:b0:21:38:8c:ac:b3:4d:80:bd:bf:ec:8b:ae:11:
         3f:05:2a:28:6a:c3:b7:5b:7f:79:63:4b:7a:52:26:4a:45:0c:
         18:b4:6a:e8:b6:22:2e:53:8c:0d:c7:23:88:d3:45:37:1a:66:
         f2:ca:b5:a9:20:c6:c8:d9:3a:06:3a:f3:04:bd:18:e8:03:48:
         6e:9c:a7:7f:d8:f7:45:8b:66:17:0e:13:6c:64:d3:f5:66:27:
         dc:e3:30:68:4a:ca:00:77:65:eb:fa:96:a6:ac:c0:b8:13:20:
         7d:7a:91:91:9a:36:c7:5e:4b:bb:ec:da:35:3f:df:bc:fc:75:
         e5:3c:c5:0f:74:ca:78:86:b7:41:f6:57:1e:1a:e4:87:95:67:
         d3:96:9c:3d:71:86:3f:41:7c:4b:21:64:8e:4a:cb:73:09:d0:
         6a:6e:65:85:9b:c4:75:be:7d:f1:fb:90:05:1b:bb:b4:43:25:
         27:ae:3e:49:1a:4b:39:9b:65:2a:3d:47:65:e4:9a:6c:b9:75:
         5d:67:8c:8a:3e:4f:16:46:56:7a:2a:ed:c7:4f:27:0b:7e:14:
         7a:9b:53:25:9b:77:75:cb:b8:18:c5:7a:64:e1:ec:c3:a6:8a:
         38:ad:a3:10:13:85:fc:e6:51:55:15:81:da:8a:93:02:09:2c:
         a1:0c:d7:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 1 04:51:27 2025 by rpki-client